Fun

Alex bridge on BNB Smart Chain drained of $4.3M after suspicious upgrade — CertiK

News Feed - 2024-05-15 05:05:19

Christopher Roark3 hours agoAlex bridge on BNB Smart Chain drained of $4.3M after suspicious upgrade — CertiKThe deployer account changed an Alex contract’s implementation address, and multiple tokens were subsequently drained from its bridge.887 Total views9 Total sharesListen to article 0:00NewsOwn this piece of crypto historyCollect this article as NFTJoin us on social networksAccording to a May 14 report from blockchain security platform CertiK, the Alex protocol bridge on the BNB Smart Chain network suffered $4.3 million in suspicious withdrawals just after its contract was suddenly upgraded.


Alex is a Bitcoin layer-2 protocol. According to its official website, it provides decentralized finance applications on Bitcoin. Its bridges are used to transfer assets from other networks, such as BNB Smart Chain and Ethereum, to its own network.


Blockchain data confirms that the Alex deployer account performed five identical upgrades to the “Bridge Endpoint” contract on BNB Smart Chain beginning at 3:56 pm UTC. Approximately $4.3 million worth of Binance-Pegged Bitcoin (BTC), USD Coin (USDC), and Sugar Kingdom Odyssey (SKO) were subsequently removed from the BNB Smart Chain side of the bridge.


Because the upgrade was performed by the protocol’s deployer account, CertiK labeled the event “a possible private key compromise.” Source: CertiK


The upgrade transaction changed the implementation address to one ending in 7058. The new implementation is unverified bytecode, making it unreadable to human beings.


About 48 minutes after these upgrades began, the proxy address for the bridge contract called an unverified function on an address ending in 4848E. This resulted in 16 BTC ($983,000 at current prices), 2.7 million SKO ($75,000) and $3.3 million worth of USDC at 4:44 pm, being moved into the address at 484E.


The attacker may also be attempting to drain funds on other networks. At 5:41 pm, just minutes after the suspicious upgrade on BNB Smart Chain, a similar series of Alex upgrades occurred on Ethereum. In this case, the deployer upgraded the “artist address” to an unverified contract. Immediately afterward, an account ending in 05ed attempted to make two withdrawals from the “team address.” These withdrawals failed, producing a “not owner” error.


The 05ed account had no history before May 10. It created one unverified contract on May 10 and two more on May 14, indicating that it may be under the control of a malicious user.


At the time of publication, the Alex team has not confirmed the exploit or commented on the incident.


The Alex bridge wasn’t the only protocol to face a potential exploit in May. On May 13, decentralized exchange Equalizer announced that it had lost more than 2,000 of its own tokens from an attacker who siphoned them away in small increments over several days. The Gnus.ai hack on May 6 also resulted in $1.27 million worth of losses.


Related:CertiK discovered $5M security flaw in Wormhole bridge on Aptos# Bitcoin# Blockchain# Ethereum# Hackers# Private Keys# Cybersecurity# Hacks# DeFi# Layer2Add reaction

News Feed

Coinbase secures restricted dealer license in Canada
Helen Partz10 hours agoCoinbase secures restricted dealer license in CanadaCoinbase now has two entities in Canada: Coinbase Canada, with an international dealer license, and Coinbase, registered as a restricted dealer.1
Yashu Gola11 hours agoWhy is Dogecoin price down today?Dogecoin price is down today as the effect of Elon Musk"s DOGE rally fades away and the price of Bitcoin slips below $30,000.3818 Total views42 Total sharesListen to
Report: Shanghai Bank Mulls Buying Silicon Valley Bank’s Stake in Chinese Subsidiary
Report: Shanghai Bank Mulls Buying Silicon Valley Bank"s Stake in Chinese Subsidiary According to reports, Shanghai Pudong Development Bank may acquire the China-based subsidiary o
BTC to INR: P2P Bitcoin Marketplaces Growing in India
BTC to INR: P2P Bitcoin Marketplaces Growing in IndiaEver since the supreme court quashed the banking restriction imposed by the central bank, interest in cryptocurrency has been ri
Report: Genesis Global Trading’s Lending Unit Suspends Withdrawals and New Loan Originations
Report: Genesis Global Trading’s Lending Unit Suspends Withdrawals and New Loan Originations Following Blockfi, Liquid Global, and Salt Lending halting withdrawals, reports indic
Bitgo Plans to Launch Wrapped Bitcoin on the Tron Blockchain
Bitgo Plans to Launch Wrapped Bitcoin on the Tron BlockchainSoon there will be another network that allows people to tokenize BTC in order to leverage the underlying blockchain&rsqu
Helen Partz15 hours agoCrypto banking app Bitwala relaunches via new partnership with StrigaEuropean crypto-banking platform Bitwala, formerly known as Nuri, is coming back after ceasing operations in 2022.3631 Total vie
Canada Detains Teen for Alleged $36 Million Cryptocurrency Theft
Canada Detains Teen for Alleged $36 Million Cryptocurrency Theft A teenager has been arrested in Canada after committing what law enforcement officials in Ontario have described as
Microsoft Reportedly Shutting Down Industrial Metaverse Focused Group
Microsoft Reportedly Shutting Down Industrial Metaverse Focused Group Software giant Microsoft is shutting down one of its most significant groups dedicated to the development and
Spanish Municipality Creates Its Own Cryptocurrency to Boost Economy Hurt by Coronavirus Crisis
Spanish Municipality Creates Its Own Cryptocurrency to Boost Economy Hurt by Coronavirus Crisis A municipality in the province of Sevilla, Spain, has launched it
SEC vs. Binance: Court rules BNB sales, cryptocurrencies not securities
Zoltan Vardai12 hours agoSEC vs. Binance: Court rules BNB sales, cryptocurrencies not securitiesIn a major win for the crypto industry, a federal court ruled that cryptocurrency tokens themselves are not securities.2606
Geopoly Launches Alpha Version Of Blockchain-Based Game
Geopoly Launches Alpha Version Of Blockchain-Based Game press release PRESS RELEASE.Geopoly has announced the launch of a blockchain-based alpha version of the game, which will be p